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METHOD AND SYSTEM FOR MONITORING AN OPERATIONAL AREA OF A 

SUBSCRIBER STATION 

FIELD OF THE INVENTION 

The present invention relates generally to a wireless communications 
system, and more particularly, to a method and system for monitoring an 
operational area of a subscriber station. 

5 BACKGROUND 

Wireless service providers sometimes provide different coverage areas for 
communication services and assign different billing rates to the coverage areas. 
For example, a service provider may provide communications service within a 
limited coverage area and an extended coverage area. By definition, the 

10 extended coverage area affords communication service over a greater 
geographic region than the limited coverage area. Because of the greater 
coverage area associated with the extended coverage area, the service provider 
may charge a premium billing rate for the subscriber's communications within the 
extended coverage area, as opposed to the limited coverage area. 

15 If a subscriber station is capable of operating anywhere in the extended 

coverage area or in the limited coverage area, the opportunity for subscriber fraud 
arises. For instance, a subscriber that only pays the service provider for operation 
in the limited coverage area may attempt to improperly use the subscriber station 
in the extended coverage area. That is, a subscriber may simply move the 

20 subscriber station from its authorized limited coverage area without paying 

requisite charges to the service provider for operation in the extended coverage 
area. Thus, a need exists for a method and system for monitoring in what area a 
subscriber station is operating (i.e., the operational area of the subscriber station) 
on a wireless communications system. 

25 SUMMARY OF THE INVENTION 

In accordance with one aspect of the invention, a system and method for 
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monitoring the operational area of one or more subscriber stations in a wireless 
systenn facilitates determining whether subscriber stations are operating in their 
authorized coverage areas or not. The system and method first defines a 
characteristic composite fingerprint for a subscriber station associated with the 
5 operation of a subscriber station in its authorized coverage area. A composite 
fingerprint refers to a statistical compilation of detected signal characteristics of a 
receive signal received from the subscriber station. A characteristic composite 
fingerprint refers to a composite fingerprint associated with the subscriber station 
transmitting within an authorized coverage area or another known area. An 

10 authorized coverage area is a coverage area where communications service is 
intentionally provided to a particular subscriber station. In contrast, a restricted 
coverage area Is a coverage area where communication service to a particular 
subscriber station is prohibited or limited. An operational area monitor monitors an 
operational composite fingerprint for the subscriber station. The operational 

1 5 composite fingerprint refers to a composite fingerprint that is determined while a 
subscriber station is active (i.e., communicating with the base station), regardless 
of whether the subscriber station is located in the authorized coverage area or the 
restricted coverage area. The monitor or another network element compares the 
operational composite fingerprint to the characteristic composite fingerprint to 

20 determine if the subscriber station is operating within the authorized coverage 
area or the restricted coverage area. Thus, the method and system of the 
invention is well-suited for fraud detection in wireless communications and for 
restricting communications service for one or more subscriber stations to an 
authorized coverage area. 

25 BRIEF DESCRIPTION OF THE DRAWINGS 

FIG. 1 A shows a block diagram of a wireless communications system in 
accordance with the invention. 

FIG. IB illustrates multi-path signal propagation between a base station 
and a subscriber station in the wireless communication system of FIG. 1 A. 
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FIG. 2 is a flow diagram of a method for monitoring the operational area of 
a subscriber station in a wireless system in accordance with FIG. 1A. 

FIG. 3 is a histogram showing the number of times each propagational 
delay factor has been observed on at least one uplink antenna set of a base 
5 station in accordance with the invention. 

FIG. 4 is a graph of a probability density function of various propagational 
delays observed on an uplink antenna set in accordance with the invention. 

FIG. 5 is a histogram of a number of times received signals were observed 
on each antenna set of a sectorized base station in accordance with the 
10 invention. 

FIG. 6A and 6B are a flow chart illustrating a method for forming a 
composite fingerprint in accordance with the invention. 

FIG. 7 is a flow chart illustrating one procedure for comparing an 
operational composite fingerprint to a characteristic composite fingerprint in 
1 5 accordance with the invention. 

FIG. 8 is a flow chart of an alternate procedure for comparing the 
operational composite fingerprint to the characteristic composite fingerprint in 
accordance with the invention. 

DETAILED DESCRIPTION 

20 Wireless Communication System 

In accordance with the invention, FIG. 1 A shows a block diagram of a 
wireless communication system 1 1 for determining whether one or more 
subscriber stations 26 are operating within an authorized coverage area 36. Base 
stations 10 provide coverage defined in terms of cells or sectors thereof. A 
25 restricted coverage area 38 and an authorized coverage area 36 may be defined 
for each corresponding subscriber station 26. 

An authorized coverage area 36 includes a region within a cell or a sector 
which the subscriber station 26 is authorized to use. For example, an authorized 



Docket No. 2925-322P 
Lucent Ref. No.: 1 17696/Daudelin 13-1 



4 



coverage area 36 may include a coverage area that serves a subscriber's 
business or residence as a fixed wireless service. Although the authorized 
coverage area 36 in FIG. 1A is a round area, the authorized coverage area nnay 
have another shape. The authorized coverage area 36 may be associated with 
5 the signal coverage provided by one or more base stations. Although the 
authorized coverage area 36 may be fully contained within a cell or sector as 
shown, the authorized coverage area 36 may be formed by the union of or 
overlapping of coverage areas within adjacent cells or sectors. 

A restricted coverage area 38 includes one or more cells or sectors, or 

10 geographic portions thereof, which represent a service area that the subscriber 
station 26 is not authorized to use. In FIG. 1 A, the restricted coverage area 38 is 
indicated by the dashed lines. Here, the restricted coverage area 38 surrounds 
the authorized coverage area 36. 

One or more base stations 10 communicate to a base station controller 34. 

15 For example, a base station 10 that ordinarily provides coverage to the subscriber 
station 26 in the authorized coverage area 36 communicates with the base station 
controller 34. The base station controller 34 is coupled to a wireless switching 
center 32. The wireless switching center 32 is coupled to an authentication center 
28 and a home location register 30. A subscriber station 26 may transmit to one 

20 or more base stations 10 via a reverse channel, in a preferred embodiment, the 
base station 10 comprises a CDMA capable base station. 

Each base station 10 may contain a plurality of directional antenna sets 
(20, 22, and 24). For illustrative purposes, a base station 10 in FIG. 1A is 
associated with three sets of directional antennas designated a first antenna 

25 sector set 20, a second antenna sector set 22 and a third antenna sector set 24, 
although other numbers of antennas and configurations may be used to practice 
the invention, such as a single antenna per set. 

In general, an operational area monitor 12 may be implemented as 
software instructions on an existing or commercially available base station 10 or 
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by the addition of both hardware and software instructions to an existing base 
station. For illustrative purposes as shown in FIG. 1 A, the operational area 
monitor 12 includes an antenna monitor 14 and a propagational delay measurer 
16 coupled to a processor 18. In turn, the processor 18 is coupled to a storage 
5 device 19. 

Reception of Subscriber Station Signals 

Referring to FIG. IB, the subscriber station 26 transmits a reverse channel 
signal to the base station 10. As shown in FIG. IB, the reverse channel may be 
transmitted as an omnidirectional signal with signal components 108 radiating into 

10 many different directions. The reverse channel signal may be received at the 

base station 10 as a plurality of receive signals 107 offset in time from each other. 
The conversion of the single transmitted signal from the subscriber station 26 to 
multiple temporally offset receive signals 107 at the base station 10 is sometimes 
referred to as multi-path reception. Multi-path reception occurs where the receive 

15 signal 107 is reflected from an obstacle 105 and takes multiple propagational 
paths between the subscriber station 26 and the base station 10. For example, 
the base station 10 may receive a direct or line-of-sight signal 109 from the 
subscriber station 26 and a group of reflective signals 1 1 1 over various indirect 
paths from the subscriber station 26. Thus, the base station receiver may receive 

20 one receive signal or multiple temporally offset receive signals 107 transmitted 
from the subscriber station 26. 

In the context of a code-division multiple access system, the baseband 
signal modulation includes spreading by a pseudo-random code sequence. To 
demodulate the signal, a demodulator of the base station 10 must despread the 

25 received modulated signal by the same pseudo-random code sequence used for 
encoding, but by a temporal offset that depends on the delay encountered by the 
reverse channel signal during propagation between the subscriber station 26 and 
the base station 1 0. 

A receiver of the base station 10 preferably comprises a rake receiver, 
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which independently dennodulates different temporally offset versions of the 
receive signal 107 from a subscriber station 26 and then combines the different 
versions, to achieve diversity gain where possible. The rake receiver includes 
multiple demodulators, which are sometimes referred to as fingers. In the 
5 presence of multi-path propagation, a group of fingers of the rake receiver may be 
dynamically assigned to a number of temporally offset versions of a signal for a 
reverse channel signal of a subscriber station 26. The receiver of base station 10 
includes a signal searcher which repetitively scans the receive signals 107 
incident upon the antenna sets of the base station 10 to identify the highest 

1 0 quality, temporally offset versions of a receive signal 1 07 for assignment to the 
fingers of the rake receiver. 

Each finger of the rake receiver may be dynamically assigned a unique 
temporal offset, which may be referred to as the propagational delay factor. At a 
sampling interval, a finger is preferably assigned to a specific propagational delay 

15 and a specific antenna. The propagational delay represents a temporal offset 

which when applied to a reference pseudo-random code allows demodulation of a 
receive signal by the finger. That is, the rake receiver may time-shift the reference 
pseudo-random code sequence to demodulate the receive signal. Regardless of 
whether multi-path propagation is present, during a sampling interval, the antenna 

20 monitor 12 preferably measures the number of observations of a subscriber 
station's signal received on each particular uplink antenna set (20, 22, or 24) 
associated with the base station 10. An observation represents the detection of a 
valid reverse link signal above a noise floor during a sampling interval. An uplink 
antenna set (20, 22, or 24) refers to one or more antennas that may receive a 

25 reverse link signal from a subscriber station 26 to a base station 10. For example, 
an uplink antenna set may include two antennas to realize space-diversity 
reception. 
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Propagational Delay Measurer 

The propagational delay measurer 16 measures the number of 
observations of various propagational delays for a given subscriber station 26 
during a call or data transmission. The propagational delays refer to the different 
propagational delays that are present in the uplink receive signals that traverse 
different propagational paths from the subscriber station 26 to the base station 
10. In a code-division, multiple-access (CDMA) system, the propagational delay 
measurer 16 may measure a propagational delay by comparing the reference 
pseudo-random code sequence with the receive pseudo-random code sequence. 
The time offset between the reference pseudo-random code sequence and the 
received pseudo-random code sequence represents the propagational delay 
factor. Here, the time offset measured is caused by the multi-path propagational 
delays and should not be confused with the pseudo-random code sequence 
offsets that can exist between different base stations 10 and sectors of a code- 
division, multiple-access system to produce orthogonal code relations that reduce 
or minimize interference between base stations 10 serving proximate geographic 
regions. 

Each of the observed propagational delays falls within a range of possible 
propagational delays between the subscriber station 26 and the base station 10 
serving the subscriber station 26 when the subscriber station is operating in the 
authorized coverage area. The values of the propagational delays vary with the 
location of the subscriber station and are determined by characteristics of terrain 
(e.g., topology), geometry of obstacles (e.g., morphology), reflective 
characteristics of obstacles, the distance between the subscriber station 26 and 
the base station 10, or other relevant factors. A shorter propagational delay likely 
represents a direct or line-of-site propagational path between the subscriber 
station 26 and the base station 10, whereas a longer propagational delay may 
result from multi-path propagation between the subscriber station 26 and the base 
station 10. If the impact of the distance between the subscriber station 26 and the 
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base station 10 predominates over other propagational factors, the values of 
propagational delays may be generally correlated to each other within a 
circumferential zone about a base station 10 site. A characteristic of a particular 
receive signal may include not only its propagational delay, but also the antenna 
identifier of the antenna set over which the receive signal is received at a 
demodulating finger. 

Fingerprint 

A fingerprint refers to a snapshot of the signal characteristics of a receive 
signal 107. The signal characteristics may include one or more of the following: 
propagational delay, antenna identifier, and signal quality indicator (e.g., signal-to- 
noise ratio or a short-term average of signal strength). The highest quality, if not 
all, receive signals may be assigned to and demodulated by fingers. Therefore, 
the operational area monitor 12 preferably forms a composite fingerprint by 
periodically collecting the fingerprints of mature fingers. A mature finger is defined 
as a finger which has been assigned to a seemingly valid receive signal for a 
significant period of time (e.g., 200 milliseconds). 

In an alternate embodiment, the operational area monitor 10 may use 
factors other than maturity to select fingers from which to take fingerprints for 
observation and computation of a composite fingerprint or a characteristic 
composite fingerprint. For example, in an alternate embodiment the operational 
area monitor 12 may use a signal quality indicator, as opposed to a minimum 
tracking time associated with maturity. In another alternative embodiment, the 
operational area monitor 12 may collect fingerprints from the signal search results 
from which finger assignments of the rake receiver are derived. 

In each of the above embodiments, the signal characteristics for the 
fingerprint are readily available in existing CDMA base stations. Therefore, the 
operational area monitor 12 may comprise software instructions for a 
commercially available base station, without any additions to the base station 
hardware. Alternatively, the operational area monitor 12 may comprise a separate 
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receiving and data processing system that searciies for receive signals 107 and 
measures their characteristics independently from mechanisms of an existing 
base station. Other variations may be apparent to those skilled in the art, without 
departing from the scope of the invention. 

5 Composite Fingerprints 

Prior to monitoring the operational area of a subscriber station, the 
operational area monitor 12 takes a characteristic composite fingerprint of a 
subscriber station 26. A characteristic composite fingerprint is a statistical 
compilation of multiple fingerprints taken while a subscriber station 26 is operating 

10 within its authorized operational area. The characteristic composite fingerprint is 
considered to be a representative superset of any composite fingerprint taken 
from the authorized area. The characteristic composite fingerprint provides a 
reference for subsequent comparison to an operational composite fingerprint. 

During a call, the operational area monitor 12 takes occasional fingerprints 

15 of the receive signals 107 and forms a composite fingerprint. A composite 

fingerprint is a statistical compilation of the data from multiple fingerprints of the 
receive signals 107, which are sampled from a subscriber station 26 during a call 
duration or data transmission duration. A composite fingerprint has a distribution 
of signal characteristics (e.g., propagational delay and antenna identifiers) which 

20 are influenced by the location and physical features of the operational area from 
which the subscriber station 26 transmits. ). Advantageously, selecting only 
mature fingerprints of finger assignments for inclusion in the composite fingerprint 
prevents the composite fingerprint from being corrupted by spurious signals or 
interference. If the subscriber station 26 transmits from a second operational area 

25 that is different from and sufficiently geographically separated from a first 

operational area, a first composite fingerprint associated with the first operational 
area is likely to differ from a second composite fingerprint associated with the 
second operational area in a statistically significant manner. 

The difference between an operational composite fingerprint and a 
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characteristic composite fingerprint is that the operational composite fingerprint 
may be associated with any location of the subscriber station, whereas the 
characteristic composite fingerprint is only associated with an authorized 
coverage area. The operational composite fingerprint may be compared with a 
5 previously computed characteristic composite fingerprint to determine whether the 
subscriber station is operating outside of an authorized operational area. In an 
alternate configuration, the operational composite fingerprint may be used as an 
input to compute a characteristic composite fingerprint so long as the subscriber 
station is operating from a known operational area or geographic location. 

1 0 Processor of Operational Area Monitor 

The antenna monitor 14 provides the processor 18 with the number of 
observations of reverse signals on antenna sets, with reference to corresponding 
antenna identifiers observed on a sampling interval by sampling interval basis. 
The propagational delay measurer 16 similarly provides observations of 

15 measured propagational delays to the processor 18 on a sampling inten/al by 
sampling interval basis. The processor 18 processes the foregoing 
measurements of antenna observations and propagational delays for a call of a 
particular subscriber station 26 operating in its authorized geographic area 36 to 
obtain the characteristic composite fingerprint. The processor 18 stores the 

20 characteristic composite fingerprint in an archival database in a storage device 
19. The storage device 19 and the processor 18 may regularly or periodically 
send updates of characteristic composite fingerprints or fingerprint information to 
a home location register 30, an authentication center 28, or any other central 
network element to facilitate record-keeping of potentially fraudulent activity of a 

25 subscriber station 26. The processor 18 may also send alert: data to the 

authentication center 28 if the operational area monitor 12 detects a subscriber 
station 26 operating outside of its authorized coverage area 36. 

The home location register 30 stores subscriber information on the 
subscriber stations 26, such as the extent to which certain subscriber features are 
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activated or not. The home location register 30 also provides an indication of 
where the subscriber station 26 is active or what base station 10 the subscriber 
station 26 most recently used. 

Authentication Center 

5 The authentication center 28 is responsible for verifying the identity of 

subscriber stations 26 to distinguish authorized subscriber stations 26 from 
unauthorized subscriber stations 26. The operational area monitors 12 within 
various base stations 10 within the wireless communications system may report 
communications activity of particular subscriber stations 26 in their restricted 

10 coverage areas 38 as potentially fraudulent activity. The authentication center 28 
may be programmed to provide reports of potentially fraudulent activity to a 
service provider where the subscriber station 26 has been detected with an 
operational composite fingerprint that differs from a characteristic composite 
fingerprint. A history of potentially fraudulent activity may be addressed by the 

1 5 service provider as the service provider sees fit. For example, the service provider 
may charge a subscriber station, which is assigned to a fixed wireless service 
within an authorized coverage area, a premium service charge upon detection of 
repeated communications activity within the restricted coverage area. Alternately, 
the service provider may wish to establish a new characteristic composite 

20 fingerprint upon repeated detection of communications activity in the restricted 
coverage area in the event that the characteristic composite fingerprint is corrupt 
or inaccurate. 

Instead of waiting for the service provider to analyze the reports of 
potentially fraudulent activity, in an alternate embodiment, the authentication 
25 center 28 may automatically deny access to, or immediately terminate in-progress 
communication with unauthorized subscriber stations. The authentication center 
28 may cooperate with the operational area monitor 12 and respond to its 
provision of alert data to terminate the access of a subscriber station 26 to the 
wireless communication system and archive possible fraudulent transgressions if 
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the subscriber station 26 moves from an authorized coverage area 26 to a 
restricted coverage area 28. 

Method for Monitoring Operational Area of a Subscriber Station 

FIG. 2 is a flow diagram of a method for monitoring the geographic 
5 operational area of a subscriber station 26 in accordance with the wireless system 
of FIG. 1 A. Starting in step 3100, an operational area monitor 12 of a base station 
10 defines a characteristic composite fingerprint of a subscriber station 26 
operating in the authorized coverage area 36. A fingerprint comprises at least one 
observation of a propagational delay and may include one observation of an 
10 antenna identifier. The observations of propagational delay and antenna 

identifiers may be used to identify a specific receive signal 107 during a sampling 
period. A composite fingerprint represents data collected from a group of 
fingerprints. 

In step 8100, a characteristic composite fingerprint may be defined In 
15 accordance with various alternative techniques. A characterisfic composite 
fingerprint is associated with a geographic operafional area, in the authorized 
coverage area 36, of a subscriber station 26. Each subscriber station 26 serviced 
by the wireless system 1 1 may have a unique characteristic composite fingerprint 
to the extent that their geographic operafional regions are unique, although 
20 mulfiple subscriber stations 26 could have substanfially identical or similar 
characteristic composite fingerprints. 

In accordance with a first technique, which may be used in step SI 00, a 
composite fingerprint may be defined in terms of a first histogram and a second 
histogram. The first histogram includes observations of propagational delays 
25 taken for a particular subscriber station 26 during a call or data transmission over 
multiple sampling intervals. The second histogram includes observations per 
antenna identifier taken for a particular subscriber station during a call or data 
transmission over mulfiple sampling intervals. The antenna identifier preferably 
identifies antenna sets associated with different sectors of a sectorized site. 
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In accordance with a second technique, which may be used in step SI 00, 
a composite fingerprint may be defined in terms of probability density functions 
derived from the foregoing first histogram and the second histogram. In the case 
of a discrete random variable, an empirical probability density function may be 
5 referred to as an empirical probability mass function. For exemplary purposes, a 
histogram may be converted into an empirical probability density function by the 
following two steps: (1) normalization of the histogram blocks by the total number 
of samples under consideration and (2) dividing by the width of a histogram block. 
A histogram may be converted into an empirical probability density function in 

10 accordance with other techniques which are generally known and available in 
published works on statistics, industrial engineering, or the like. 

In accordance with a third technique, which may be used in step S100, a 
composite fingerprint is expressed as a group of first histograms and a group of 
second histograms. Each first histogram within the group represents 

15 propagational delays per individual antenna identifiers. Each second histogram 
within the group includes antenna observations per antenna identifier for different 
sectors of a site. In accordance with a fourth technique, the composite fingerprint 
is expressed in terms of a probability density functions of the groups of first and 
second histograms of the third technique. 

20 Step SI 00 includes a collection or gathering procedure for defining a 

characteristic composite fingerprint consistent with one of the foregoing 
techniques. The characteristic composite fingerprint may be gathered for storage 
in an archival database (e.g., in a storage device 19) according to various 
alternative techniques. In accordance with a first gathering procedure, a 

25 characteristic composite fingerprint is defined by transmitting at least one 

communication (e.g., call or message transmission) from the authorized coverage 
area 36 of intended use. For example, prior to full activation of communications 
service of the subscriber station 26, the service provider could require the 
subscriber to place an initial call within the authorized coverage area 36 to a 
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specific phone number for calibration purposes to initially define the characteristic 
composite fingerprint. The characteristic composite fingerprint may be 
subsequently updated as cell cites are relocated or boundaries of authorized 
coverage areas and restricted coverage areas are changed by one or more 
5 subsequent calibrating calls. Under a second gathering procedure, the 

characteristic composite fingerprint may be built by ongoing averaging of multiple 
composite fingerprints from ordinarily occurring subscriber calls, without requiring 
a special calibrating call to a specific phone number. 

The characteristic composite fingerprint may be stored in a database in the 

10 home location register 30, in the storage device 19 in the base station 10, or both 
in the home location register 30 and the storage device 19. In the home location 
register 30, each subscriber station identifier is associated with a corresponding 
characteristic composite fingerprint. The base station 10 may provide a base 
station identifier along with a characteristic composite fingerprint to the home 

15 location register 30 for storage in the database. In the case where an authorized 
coverage area is served by more than one base station, a distinct characteristic 
composite fingerprint may be provided for each base station identifier. 

Continuing with the description of the flow chart in FIG. 2, in step S102 
after step SI 00, the operational monitor 12 provides temporally random, regular 

20 or continuous samples of operational composite fingerprints for the subscriber 
station 26 as the subscriber station 26 operates on the wireless system 1 1 . The 
operational composite fingerprint, the characteristic composite fingerprint, or both 
may be stored in an archival database in a storage device 19 of a base station 
10. Alternately, the operational composite fingerprint may be transmitted to the 

25 home location register 30, the authentication center 28, or another central 

network element for comparison with the characteristic composite fingerprint. FIG. 
6A and FIG. 6B show an exemplary procedure for step SI 00 and step S102 in 
greater detail than FIG. 2 and will be described later. 

In step S104, one of the base stations 10 or another network element of 
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the wireless system compares the operational composite fingerprint to the 
characteristic composite fingerprint to determine if the subscriber station 26 is 
operating within the authorized coverage area 36 or a restricted coverage area 38 
of the wireless system 1 1 . 
5 In one example of implementing step S104, the base station 10 may 

compare the distribution of antenna observations of the characteristic composite 
fingerprint with the distribution of antenna observations of the operational 
composite fingerprint to determine if the subscriber station 26 is operating within 
the authorized coverage area 36 or in a restricted coverage area 38. Further, the 
1 0 base station 10 may compare the distribution of observations of propagational 
delays of the characteristic composite fingerprint to the distribution of 
observations of propagational delays of the operational composite fingerprint to 
determine whether the subscriber station 26 is operating in the authorized 
coverage area 36. 

15 In an alternate comparison procedure, the base station 10 may send the 

operational composite fingerprint to the authentication center 28 at the end of the 
each call. Subsequently, the authentication center 28 may use a subscriber 
station identifier and a base station to retrieve the corresponding characteristic 
composite fingerprint from the home location register 30 or otherwise for 

20 comparison to the operational composite fingerprint. FIG. 7 and FIG. 8 show two 
exemplary procedures for step SI 04 in greater detail than FIG. 2 and will be 
described subsequently herein. 

Histogram of Number of Observations of Propagational Delays 

FIG. 3 shows a histogram of the number of times each propagational delay 
25 has been observed for a subscriber station 26. The number of observations are 
measured on a sampling interval basis for a given subscriber station to define a 
characteristic composite fingerprint in step S100 or to facilitate monitoring of an 
operational composite fingerprint for step S102 of FIG. 2. FIG. 3 represents one 
possible form of the output of the propagational delay measurer 16. The 
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horizontal axis of FIG. 3 is divided into temporal units of propagational delay from 
a shorte'st propagational delay to a longest propagational delay. The temporal 
units preferably have a resolution as high as fractional chips (e.g., one-eighth 
chip) of the pseudo-random code of a CDMA system. A chip refers to the signal 
5 corresponding to an individual term of a pseudo-random code sequence. 

The vertical axis shows the number of observations of the corresponding 
propagational delays of the horizontal axis. In the context of FIG. 3, an 
observation refers to finding a reverse link signal or a derivative component 
thereof with the corresponding particular propagational delay between the 

10 subscriber station 26 and the base station 10 during or at a sampling interval. The 
distribution of the number of observations of propagational delay during a 
sufficient group of sampling intervals represents one factor for establishing the 
characteristic composite fingerprint and the operational composite fingerprint. 
The reference range represents a desired scope of propagational delays 

1 5 which adequately define the geographic extent of the authorized coverage area. 
For example, the reference range may be chosen to encompass all expected 
uplink signals within the authorized coverage area. An uplink signal is transmitted 
from the subscriber station 26 to the base station 10. The detected propagational 
delays that fall within the reference range are grouped into intervals along the 

20 horizontal axis which may be referred to as counter bins. The counter bins outside 
of the reference range may be referred to as a smaller component counter and a 
larger component counter. The propagational delays that fall outside of the 
counter bins within the reference range are associated with a smaller component 
counter and a larger component counter. 

25 Although the counter bins within the reference range of FIG. 3 indicated 

observations of propagational delays throughout the entire reference range, 
observations of particular propagational delays may be zero within the reference 
range. The histogram profile may be relatively narrow in the total range of 
observed propagational delays where a clear, unobstructed line-of-sight path and 
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no reflective paths exist between the subscriber station 26 and the base station 
10. 

The propagational delay measurer 16 or the processor 18 may convert the 
histogram of FIG. 3 into the empirical probability density function of FIG. 4, as 
5 previously described. FIG. 4 is an empirical probability density function, which 
shows the probability of observing particular propagational delays. The height of 
each bar represents the extent of probability of occurrence associated with a 
particular propagational delay between a particular subscriber station 26 and a 
base station 10 during a call or data transmission from a given geographic area. 

10 Histogram of Number of Observations at Each Antenna Set 

FIG. 5 is histogram of the number of times received signals were observed 
on each antenna set. The histogram of FIG. 5 may be applied to execute the 
method of FIG. 2. The antenna identifiers are associated with corresponding 
uplink antenna sets of a base station 10. FIG. 5 represents one possible form of 

15 output of the antenna monitor 14. The antennas associated with a corresponding 
base station 10 are assigned antenna identifiers. For example, in the context of a 
site with three sectors, the base station 10 may be associated with six unique 
antenna identifiers. That is, each antenna set may include two antennas for 
diversity reception, where each antenna has a corresponding antenna identifier. 

20 An observation refers to the detection of one of the multiple temporally offset 
signals 107 on a particular antenna with an antenna identifier at a sampling 
interval or on a particular antenna set with a particular antenna set identifier at a 
sampling interval. 

The antenna sets are located on the horizontal axis and the number of 
25 observations per antenna set is located on the vertical axis. The histogram of FIG. 
5 may be converted into an empirical probability density function, as previously 
described. 
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Determination of a Composite Fingerprint 

FIG. 6A and FIG. 6B show a preferred ennbodinnent of step SI 00 and step 
S102 of FIG. 2. FIG. 6A and FIG. 6B involve the determination of a composite 
fingerprint for a corresponding subscriber station 26. As used herein, a composite 
5 fingerprint may refer to a characteristic composite fingerprint, an operational 
composite fingerprint, or both. 

Upon the setup of a call, the monitor system 12 may prepare for the 
determination of the composite fingerprint by performing an initialization 
procedure. For example the initialization procedure may include the monitor 

10 system 12 determining a reference range for a histogram, a probability density 
function, or another representation, of propagational delays between the 
subscriber station 26 and the base station 10. The monitor system 12 associates 
a central propagational delay factor with the strongest signal strength of the initial 
receive signals 107 from the subscriber station 26. The central propagational 

1 5 delay factor forms a midpoint of the reference range. The propagational delay 
factor represents observing a finger (i.e., demodulator) in the rake receiver 
adjusted to demodulate a particular propagational delay at or during a sampling 
interval. 

In the context of a code-division multiple-access (CDMA) system, the 
20 reference range may comprise a sufficient number of chips (e.g., 64 one-eighth 
chips) about the central propagational delay such that the reference range 
considers an adequate scope of area to encompass the entire range of expected 
propagational delay in an authorized coverage area. 

The method of FIG. 6A and FIG. 6B is performed after the initialization 
25 procedure has been completed. Starting from step S50, the method of FIG. 6A 
and FIG. 68 is performed at one or more sampling intervals during a call or data 
transmission. 

In step S52, the monitor 12 selects a first assigned finger of the rake 
receiver. The first assigned finger is associated with a receive signal transmitted 
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from a subscriber station 26. A finger is dynamically assigned from time to time to 
a propagational path between a subscriber station 26 and the base station 10. A 
finger that is assigned to a propagational path at least for the sampling interval 
may be referred to as an assigned finger. A finger may be idle or unassigned if 
5 the number of fingers in the rake receiver exceeds the number of multi-path 
receive signals 107, for example. 

In step S54 after step S52, the monitor 12 determines if the selected finger 
assignment (i.e., demodulator assignment) is mature. A finger assignment is 
mature if the finger has been tracking a valid propagational path by virtue of the 

10 finger being assigned to a propagational path of a subscriber station 26 for more 
than a minimum threshold time (e.g., 200 milliseconds). Both the maturity and the 
assigned status of the finger are judged on a sampling by sampling interval basis. 
If finger assignment is mature, the method continues with step S56. Otherwise, 
the method continues with step S58. 

15 In step S56, the monitor 12 increments a counter for a total number of 

observations of the mature finger assignments. The counter may be incremented 
by one for each observation of a mature finger assignment during a call of the 
subscriber station. The total number of observations of mature finger assignments 
allows the monitor 12 to normalize the first and second histograms. The first 

20 histogram may be normalized by dividing the observations of propagational 

delays in each bin by the total number of obsen/ations of propagational delays for 
all of the bins. Similarly, the second histogram may be normalized by dividing the 
observations on antenna sets by the total number of observations of all antenna 
sets. 

25 In step S58, which may follow step S54, the monitor 12 determines if the 

selected finger is the last finger for a sampling interval. If the selected finger for 
the sampling interval is the last finger the method continues in step S60. 

In step S60, if all fingers have been read for a sampling interval, the 
processor 18 has finished its work for the current sampling interval and waits for 
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the next sannpling interval to occur, at which time the algorithm may be repeated 
beginning with step S50. However, the processor 18 does not wait for the next 
sampling interval if a done state is reached. The done state may be reached upon 
completion of a call, after a fixed time duration, or after a composite fingerprint is 
5 sufficiently complete. 

If in step S58 the selected finger is not the last finger, the method 
continues with step S62. In step S62, the next finger is selected. In this way, the 
processor 18 increments to the next remaining finger until all fingers have been 
read during a sampling interval. The processor 18 preferably observes fingerprint 
10 data associated with all mature and assigned fingers within the measurement 
range for the duration of a communication between the subscriber station 26 and 
the base station 10. 

Step S64 follows step S56, which was previously discussed. In step S64, 
the monitor 12 gets the receive signal characteristic (i.e., the fingerprint) of the 
15 selected finger for an observation. In the scheme of FIG. 6A and FIG. 6B, the 
fingerprint preferably includes a propagational delay observation and an antenna 
set observation (or an antenna identifier observation). 

In step S66, the monitor 12 establishes or accesses a first histogram (e.g., 
FIG. 3) of observations of propagational delays and a second histogram (e.g., 
20 FIG. 5) of observations of antenna sets. The first histogram includes counter bins 
associated with different corresponding ranges of propagational delays. The 
second histogram includes antenna set counters associated with different 
corresponding antenna identifiers and their affiliated sectors. 

In step S68, the monitor 12 updates the second histogram by incrementing 
25 one of the counters which corresponds to an observation on a particular antenna 
set. Although the counters may correspond to sectors of a base station, in 
practice the counters may be associated with corresponding antenna identifiers or 
antenna set identifiers in any antenna arrangement. 

In step S70, the monitor 12 determines if an observed propagational delay 
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of the selected finger is within a reference range. If the observed propagational 
delay is in the reference range, the nnethod continues with step S72. If the 
observed propagational delay is not in the reference range, the method continues 
with step S74. 

5 In step S72, the monitor 12 updates the first histogram of propagational 

delay observations by incrementing the counter bin associated with the observed 
propagational delay on the selected finger. 

In an alternate technique, fingerprint data may be added to any suitable 
statistical representation of the operational coverage area, instead of adding 
10 fingerprint data to the first and second histograms. For example, the fingerprint 
data may be added to one or more probability density functions or a mathematical 
precursor to a probability density function. Such fingerprint data may also include 
other signal characteristics, such as a signal quality metric (e.g., signal strength or 
voice quality). 

15 In step S74, which may follow step S70, the monitor 12 increments a 

smaller component counter or a larger component counter depending on the 
relationship of the observed propagational delay with respect to the reference 
range. The reference range is preferably established during the initialization 
procedure, as previously described. If the observed propagational delay is lower 

20 than the reference range, the processor 18 increments a smaller component 

counter. If the observed propagational delay is greater than the reference range, 
the processor 18 increments a larger component counter. The method returns 
from step S74 or from step S72 to step S58. 

The above procedure of FIG. 6A and FIG. 6B provides a composite 

25 fingerprint or characteristic composite fingerprint of a subscriber station 26 relative 
to particular base station 10 at a base station site. The above procedure may be 
repeated for different subscriber stations. 

For a given subscriber station 26, the procedure may be repeated at each 
base station 10 with which the subscriber station 26 communicates during a call. 
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For example, when the authorized coverage area spans an area served by more 
than one base station 10, multiple characteristic composite fingerprints may be 
established for a single subscriber station 26 such that one characteristic 
composite fingerprint is stored for each participating base station 10. If multiple 
5 composite fingerprints are established for a single subscriber station 26 with 
respect to various surrounding base stations 10, the multiple composite 
fingerprints may enhance the statistical reliability or accuracy of determining 
whether the subscriber station is operating in the authorized coverage area. 



10 Comparing Operational Composite Fingerprints to Characteristic Composite 

Fingerprints 

FIG. 7 and FIG. 8 show a preferred embodiment of step SI 04 of FIG. 2. 
FIG. 7 and FIG. 8 provide two alternative methods of comparing an operational 
composite fingerprint to a characteristic composite fingerprint to determine if the 

15 subscriber station 26 is operating within the authorized region or a restricted 

region. The method of FIG. 7 or FIG. 8 may be applied at the end of each call or 
at some fixed time into a call (e.g., fifteen seconds after call initiation). 

In FIG. 7 starting in step S31 , the characteristic composite fingerprint (or 
masks derived therefrom) and the observed operational composite fingerprint are 

20 arranged in memory or registers of the processor 18 for comparison to each 

other. The characteristic composite fingerprint may be retrieved from the archival 
database 19 in the storage device or elsewhere. The operational composite 
fingerprint and the characteristic composite fingerprint may each include two 
histograms, two probability density functions, or another suitable statistical 

25 representation. For example, the characteristic composite fingerprint and the 

operational composite fingerprint may each include the following two histograms: 
(1) a first histogram of observations of different propagational delays of a receive 
signal between a subscriber station 26 and a base station 10 during one or more 
communications and (2) a second histogram of observations of different antenna 
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identifiers (e.g., for different sectors) of the receive signal during one or more 
comnriunications. The first and second histogranns of the characteristic composite 
fingerprint may be compared to corresponding first and second histograms of the 
operational composite fingerprint to determine whether the subscriber station 26 
5 is operating in the authorized coverage area 36. 

During step S31 or prior to step S31 , an antenna mask and a 
propagational delay mask may be defined based on the characteristic composite 
fingerprint. For example, the antenna mask and the propagational delay mask 
are generated or updated when the characteristic composite fingerprint is defined. 

10 The antenna mask represents the expected range over which an operational 
composite fingerprint is expected to vary about the characteristic composite 
fingerprint when a subscriber station 26 is operating within the authorized 
coverage area 36. The propagational delay mask represents the expected range 
over which an operational composite fingerprint is expected to vary about the 

15 characteristic composite fingerprint when a subscriber station 26 is operating 
within the authorized coverage area 36. The operational composite fingerprint 
may vary from call to call and is expected to generally fall within the propagational 
delay mask and the antenna mask when the subscriber station is operating within 
the authorized coverage area 36. 

20 In step S32, it is determined if the second histogram or another suitable 

representation of observations falls within an antenna mask. The antenna mask is 
preferably applied to each different antenna set (antenna set identifier) or antenna 
(antenna identifier) of a base station 10. The antenna mask may include a lower 
boundary and an upper boundary for each different antenna set or antenna 

25 associated with the base station 10. For example, a lower boundary may provide 
that at least twenty-five percent of observations must be on the first sector 
antenna set and an upper boundary may provide that no more than ninety 
percent of observations should be on the first sector antenna set. 

In an alternate example, step S32 includes evaluating a probability density 
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function of observations, instead of the second histogram, to deternnine whether 
the probability density function of observations fall within an allowable range 
defined by an antenna mask. 

If the second histogram of observations is within the range defined by the 
5 antenna mask, the method continues with step S34. However, if the second 
histogram of observations is not within the range of the antenna mask, then the 
operational area of the subscriber station 26 is considered to be located outside 
the authorized coverage area 36 or within a restricted coverage area 38 in step 
S38. 

1 0 In step S34, a first histogram of observations of propagational delays are 

evaluated to determine whether the distribution of observations of propagational 
delays for an uplink communication (e.g., call) fall within an allowable range. The 
allowable range is determined by a propagational delay mask. The propagational 
delay mask includes a constituent minimum mask and a constituent maximum 

1 5 mask associated with each different propagational delay factor or bin counter 
within the measurement range. 

The constituent minimum mask and its associated constituent maximum 
mask are applied to each propagational delay factor within the measurement 
range. The constituent maximum mask specifies a maximum allowable 

20 percentage of observations of a particular propagational delay factor. The 
constituent minimum mask specifies a minimum allowable percentage of 
observations of a particular propagational delay factor. 

If the percentage of observations at each particular propagational delay are 
within the allowable range defined by the propagational delay mask, then the 

25 method continues with step S36. In step S36, the propagational delays 

associated with a call to the base station 10 indicate that the subscriber station 26 
is most likely operating within the authorized coverage area. If the propagational 
delays received at base station 10 are outside of the propagational delay mask, 
the method continues with step S38 in which the operational area of the 
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subscriber station 26 is determined to be located outside the authorized coverage 
area 36. 

Following step S38, the access of the subscriber station 26 nnay be denied, 
terminated, or tracked with respect to the wireless system 1 1 . The authentication 
5 center 28 may authorize the transmission of a warning to the subscriber station 
26 indicating that the subscriber station 26 is operating from an unauthorized 
coverage area and that the subscriber station 26 may be charged at a premium 
billing rate when operating outside the authorized coverage area 36 or even 
penalized for attempting to operate outside the authorized coverage area 36. 

10 FIG. 8 is similar to the method of FIG, 7 and like reference numerals 

indicate like steps. However, FIG. 8 includes steps S44 and S46 rather than steps 
S31 and S34, respectively, of FIG. 7. Step S44 is similar to step S31, except an 
antenna mask and an allowed outside prominent characteristic range of 
propagational delays is retrieved or established. During or prior to step S44, the 

15 antenna mask and the allowed outside prominent characteristic may be defined 
based on the characteristic composite fingerprint. The antenna mask represents 
the expected range over which an operational composite fingerprint is expected to 
vary about the characteristic composite fingerprint when a subscriber station 26 is 
operating within the authorized coverage area 36. The allowed prominent 

20 characteristic range of propagational delays consists of a range of propagational 
delays, not necessarily contiguous, which are most likely observed when the 
subscriber station 26 is operating within its authorized coverage area 36. 

In step S46, the processor 18 of the operational area monitor 12 compares 
an observed outside ratio to a benchmark outside ratio of propagational delays to 

25 determine if the subscriber station 26 is compliant with an allowed prominent 
characteristic range of propagational delays. The observed outside ratio 
represents a ratio of observed propagational delays, which are outside the 
allowed prominent characteristic range, to the total number of observed 
propagational delays regardless of whether they are inside or outside the allowed 
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prominent characteristic. The benchmark outside ratio represents a nriaxinnunn 
value which the observed ratio should not exceed when the subscriber station 26 
is operating within its authorized coverage area. 

If the observed outside ratio exceeds the benchmark outside ratio of 
5 propagational delays, then the subscriber station 26 does not comply with the 
allowed prominent characteristic range and the subscriber station 26 is 
determined to be operating outside of the authorized coverage area 36, as 
indicated by step S38. The method of FIG. 8 preferably triggers step S38 when 
the base station 10, the authentication center 28 or another network element 
10 detects the subscriber station 26 operating In an unauthorized coverage area 38 
because the observed outside ratio is greater than or equal to the benchmark 
outside ratio. 

In contrast, in step S36, the subscriber station 26 is most likely operating 
within the authorized region. The method of FIG. 8 triggers step S36 when the 

15 observed outside ratio is less than the benchmark outside ratio. 

Once the mobile subscriber is identified as operating outside of the 
authorized coverage area 36 or inside a restricted coverage area 38, the 
information may be made available to the following network elements: (1) to the 
authentication center 28 to deny access to the system, (2) to a billing system 

20 (connected to the wireless switching center 32) to increase a charge for the use of 
a restricted coverage area 38, or (3) to the home location register 30 to record 
unauthorized uses in the home location register for fraud detection purposes. 

Although the invention is primarily described with reference to a subscriber 
station 26 communicating with one base station 10 at a time, the method and 

25 system of the invention may be applied to the context of a soft hand-off from one 
base station 10 to another. Accordingly, each base station 10 participating in the 
soft hand-off would produce an operational composite fingerprint relative to the 
subscriber station 26. Multiple operational composite fingerprints could be 
compared to multiple corresponding characteristic composite fingerprints for the 
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subscriber station 26. The operational composite fingerprint produced by each 
base station 10 should be compared with that base station's characteristic 
composite fingerprint to determine whether the subscriber station 26 is operating 
within an authorized coverage area. If the operational composite fingerprint is 
5 different from the corresponding characteristic composite fingerprint (determined 
with reference to a particular base station 10 serving a particular subscriber 
station 26), the particular subscriber station 26 is found to be operating outside of 
its authorized coverage area. 

This specification describes various embodiments of the method of the 

10 present invention. The scope of the claims is intended to cover various 

modifications and equivalent arrangements of the illustrative embodiments 
disclosed in the specification. Therefore, the following claims should be accorded 
the reasonable broadest interpretation to cover the modifications of equivalent 
structures and features which are consistent with the spirit of the invention 

15 disclosed herein. 
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The following is claimed: 

1 1 . A nriethod for monitoring whether a subscriber station is operating in an 

2 authorized area, the method comprising: 

3 monitoring an operational composite fingerprint for the subscriber station; 

4 and 

5 comparing the operational composite fingerprint to a characteristic 

6 composite fingerprint to determine if the subscriber station is operating within the 

7 authorized area. 

1 2. The method according to claim 1 further comprising, prior to the comparing 

2 step, the step of defining the characteristic composite fingerprint for the 

3 subscriber station associated with operating in the authorized area. 

1 3. The method according to claim 2 wherein the defining step comprises 

2 organizing a first histogram of observations of propagational delays associated 

3 with a reverse link transmission of the subscriber station from the authorized area. 

1 4, The method according to claim 3 wherein the defining step comprises 

2 organizing a second histogram of antenna observations per antenna set 

3 associated with the reverse link transmission of the subscriber station from the 

4 authorized area. 

1 5. The method according to claim 2 wherein the defining step comprises 

2 organizing a probability density function of probability versus propagational delays 

3 associated with a reverse link transmission of the subscriber station from the 

4 authorized area. 

1 6. The method according to claim 2 wherein the defining step comprises grouping 

2 propagational delay factors based on time differences of reference pseudo- 

3 random codes with respect to received pseudo-random codes, wherein the 

4 subscriber station transmits on the reverse channel using the known reference 

5 pseudo-random code. 



Y 
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1 7. The method according to claim 1 wherein the monitoring step comprises the 

2 substeps of: 

3 measuring a number of observations of different propagational delays 

4 within a measurement range during an uplink transmission of the subscriber 

5 station; 

6 measuring a number of antenna observations of receive signals, of the 

7 uplink transmission, detected on each distinct uplink antenna of a base station; 

8 incrementing antenna set counters and counter bins associated with the 

9 corresponding observations in a first histogram of propagational delays and in a 

10 second histogram of antenna observations, respectively, to form the operational 

1 1 composite fingerprint for comparison to the characteristic composite fingerprint. 

1 8. The method according to claim 7 wherein the monitoring step further comprises 

2 the substep of normalizing the first and second histograms. 

1 9. The method according to claim 7 wherein the monitoring step further includes 

2 the substeps of: 

3 determining a reference range about a central propagational delay factor 

4 associated with a corresponding strongest reverse channel signal strength for the 

5 subscriber station for propagational delays observed at a beginning of the uplink 

6 transmission; and 

7 establishing a smaller component counter and a larger component counter 

8 to track measured propagational delays that fall outside of a reference range to 

9 form the operational composite fingerprint for comparison to the characteristic 
1 0 composite fingerprint. 

1 10. The method according to claim 7 further comprising making the observations 

2 based upon signal characteristics of mature finger assignments. 

1 11. The method according to claim 7 further comprising attaining the observations 

2 from a signal searcher. 
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1 12. The method according to claim 1 wherein the comparing step further 

2 comprises determining if a first histogram of measured propagational delay 

3 factors fall within a propagational delay mask. 

1 13. The method according to claim 12 wherein the comparing step further 

2 comprises determining if a second histogram of measured observations of 

3 antenna sets falls within an antenna mask. 

1 14. The method according to claim 1 wherein the comparing step further 

2 comprises determining that the subscriber station is most likely operating within 

3 the authorized area if a first histogram of measured propagational delay factors 

4 falls within a propagational delay mask and if a second histogram of measured 

5 observations of antenna sets falls within an antenna mask. 

1 15. The method according to claim 1 wherein the comparing step further 

2 comprises determining that the subscriber station is operating in the restricted 

3 coverage area if a first histogram of measured propagational delay factors falls 

4 outside of a range defined by a propagational delay mask or if a second 

5 histogram of measured observations of antenna sets falls outside of a range 

6 defined by an antenna mask. 

1 16. The method according to claim 1 wherein the comparing step further 

2 comprises determining that the subscriber station is most likely operating within 

3 the authorized area if a first statistical representation of measured observations 

4 falls within an antenna mask and if a second statistical representation does not 

5 exceed a maximum outside prominent characteristic of measured observations of 

6 propagational delays. 

1 17. The method according to claim 1 wherein the comparing step further 

2 comprises determining that the subscriber station is operating in the restricted 

3 area if a first statistical representation of measured propagational delay factors 

4 falls outside of a range defined by a propagational delay mask or if a second 
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5 statistical representation of the measured propagational delay factors exceeds a 

6 maximum outside prominent characteristic of measured occurrences of 

7 propagational delays. 

1 1 8. A system for monitoring whether a subscriber station is operating in an 

2 authorized area, the system comprising: 

3 a monitor for monitoring an operational composite fingerprint for the 

4 subscriber station; and 

5 a processor for comparing the operational composite fingerprint to a 

6 characteristic composite fingerprint to determine if the subscriber station is 

7 operating within the authorized area. 

1 19. The system according to claim 18 further comprising a storage device for 

2 storing the characteristic composite fingerprint for a subscriber station associated 

3 with operating in the authorized area. 

1 20. The system according to claim 18 wherein the monitor comprises an antenna 

2 monitor for monitoring the number of temporally offset receive signals, originating 

3 from a transmission of the subscriber station, incident upon each distinct uplink 

4 antenna set of a base station. 

1 21 . The system according to claim 18 wherein the monitor comprises a 

2 propagational delay measurer for measuring the propagational delays of 

3 temporally offset receive signals originating from a transmission of the subscriber 

4 station. 

1 22. The system according to claim 18 wherein the characteristic composite 

2 fingerprint includes a first histogram of observations of propagational delays 

3 associated with a reverse link transmission of the subscriber station from the 

4 authorized area. 

1 23. The system according to claim 22 wherein the characteristic composite 

2 fingerprint includes a second histogram of antenna observations per antenna or 
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3 per antenna set for the reverse link transmission of the subscriber station fronn the 

4 authorized area. 

1 24. The systenn according to claim 18 wherein the characteristic composite 

2 fingerprint includes a probability density function of probability versus 

3 propagational delays associated with a reverse link transmission of the subscriber 

4 station from the authorized area. 

1 25. The system according to claim 18 wherein the characteristic composite 

2 fingerprint includes propagational delay factors based on time difference between 

3 a reference pseudo-random code and a received pseudo-random code, wherein 

4 the subscriber station transmits on a reverse channel using the reference pseudo- 

5 random code. 
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ABSTRACT OF THE DISCLOSURE 
A system and nnethod for monitoring the operational area of one or more 
subscriber stations in a wireless system facilitates determining whether subscriber 
stations are operating in their authorized coverage areas or not. The system and 
5 method first defines a characteristic composite fingerprint for a subscriber station 
associated with the operation of a subscriber station in an authorized coverage 
area. An operational area monitor monitors an operational composite fingerprint 
for the subscriber station. The monitor or another network element compares the 
operational composite fingerprint to the characteristic composite fingerprint to 
1 0 determine if the subscriber station is operating within the authorized coverage 
area or the restricted coverage area. 
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DELAY IS GREATER THAN THE REFERENCE RANGE, INCREMENT A LARGER 
COMPONENT COUNTER. 



TO 
S58 



FIG. 7 

^ S3I 

PREPARE AN OPERATIONAL COMPOSITE FINGERPRINT FOR COMPARISON WITH A 
CHARACTERISTIC COMPOSITE FINGERPRINT. RETRIEVE OR ESTABLISH AN ANTENNA 
MASK AND A PROPAGATIONAL DELAY MASK ASSOCIATED WITH THE CHARACTERISTIC 
COMPOSITE FINGERPRINT. THE OPERATIONAL COMPOSITE FINGERPRINT INCLUDES A 
FIRST HISTOGRAM OF PROPAGATIONAL DELAY OBSERVATIONS AND A SECOND 
HISTOGRAM OF ANTENNA OBSERVATIONS. 



DOES THE SECOND HISTOGRAM FALL WITHIN 
THE ANTENNA MASK ASSOCIATED WITH 
THE CHARACTERISTIC COMPOSITE FINGERPRINT?^ 



7C 



DOES THE FIRST HISTOGRAM FALL WITHIN THE 
PROPAGATIONAL DELAY MASK ASSOCIATED 
WITH THE CHARACTERISTIC COMPOSITE 
FINGERPRINT? 




^40 



S3^ 



THE SUBSCRIBER STATION IS MOST LIKELY OPERATING 
IN AN AREA WITHIN THE AUTHORIZED COVERAGE 
AREA. 



THE SUBSCRIBER STATION IS OPERATING IN AN AREA OUTSIDE THE AUTHORIZED 
COVERAGE AREA OR WITHIN A RESTRICTED COVERAGE AREA. 




PREPARE AN OPERATIONAL COMPOSITE FINGERPRINT FOR COMPARISON WITH A 
CHARACTERISTIC COMPOSITE FINGERPRINT. RETRIEVE OR ESTABLISH AN ANTENNA 
MASK AND AN ALLOWED PROMINENT CHARACTERISTIC RANGE OF PROPAGATIONAL 
DELAYS ASSOCIATED WITH THE CHARACTERISTIC COMPOSITE FINGERPRINT. THE 
OPERATIONAL COMPOSITE FINGERPRINT INCLUDES A FIRST HISTOGRAM OF 
PROPAGATIONAL DELAY OBSERVATIONS AND A SECOND HISTOGRAM OF ANTENNA 
OBSERVATIONS. 
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"^DOES THE SECOND HISTOGRAM FALl Wl I HTR" 
THE ANTENNA MASK ASSOCIATED WITH 



THE CHARACTERISTIC COMPOSITE FINGERPRINT? 





DOES THE FIRST HISTOGRAM COMPLY WITH TH 
ALLOWED PROMINENT CHARACTERISTIC RANGE 
OF PROPAGATIONAL DELAYS ASSOCIATED 
WITH THE CHARACTERISTIC COMPOSITE 
FINGERPRINT? 




MO 



THE SUBSCRIBER STATION IS MOST LIKELY OPERATING 
IN AN AREA WITHIN THE AUTHORIZED COVERAGE 
AREA. 



THE SUBSCRIBER STATION IS OPERATING IN AN AREA OUTSIDE THE AUTHORIZED 
COVERAGE AREA OR WITHIN A RESTRICTED COVERAGE AREA. 
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IN THE UNITED STATES PATENT AND TRADEMARK OFFICE 



Declaration and Power of Attorney 

As the below named inventor, I hereby declare that: 

My residence, post office address and citizenship are as stated below next to my name, 

I believe I am the original, first and sole inventor (if only one inventor is named below) 
or an original, first and joint inventor (if plural inventors are named below) of the subject matter 
which is claimed and for which a patent is soiaght on the invention METHOD AND 
SYSTEM FOR MONITORING AN OPERATIONAL AREA OF A SUBSCRIBER 
STATION, the specification of which is attached hereto. 

I hereby state that I have reviewed and understand the contents of the above identified 
specification, including the claims, as amended by an amendment, if any, specifically referred to 
ill this declaration. 

I acknowledge dae duty to disclose all information known to me which is mateiial to 
patentability as defined in Tide 37, Code of Federal Regulations, 1.56. 

I hereby claim foreign priority benefits under Title 35, United States Code, 119 (a) - (d) 
of any foreign application(s) for patent or inventor s certificate, listed below and have also 
identified below any foreign application for patent or inventor s certificate having a filing date 
before that of the application on which prioiitj?- is claimed: 

None 

I hereby claim the benefit under Tide 35, United States Code, 120 of any United States 
application(s) listed below and, insofar as the subject matter of each of the claims of this 
appEcation is not disclosed in die prior United States application in the manner provided by the 
first paragraph of Tide 35, United States Code, 112, I acknowledge the dutj^ to disclose all 
information known to me to be material to patentability as defined in Tide 37, Code of Federal 
' Regulations, 1S6 which became available between the filing date of the prior application and die 
national or PCT international filing date of this application: 

None 

1 hereby claim the benefit under Tide 35, United States Code, §1 19(e) of any United 
States proxnsional appHcation(s) listed below: 

None 

I hereby declare that all statements made herein of my own knowledge are true and that 
all statements made on information and belief are believed to be tmc; and furdier that these 
statements were made with the knowledge that willful false statements and the like so made are 
punishable by fine or imprisonment, or both, under Section 1001 of Tide 18 of the United 
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Statcs Code and that such willfbl false statements may jeopardize the validity of the application 
or any patent issued thereon. 

I hereby appoint the foDowing attoriiey(s) with full power of substitution and 
revocation, to prosecute said application, to make alterations and amendments therein, to 
receive the patent, and to transact all business in the Patent and Trademark Office connected 
therewith: 

Lester H. Bimbaum (Reg. No. 25830) 

Richard J. Botos (Reg. No. 32016) 

Jeffery J. Brosemcr (Reg. No. 36096) 

Kenneth M. Brown (Reg. No. 37590) 

Craig J. Cox (Reg- No. 39643) 

Donald P. Dinella (Reg- No. 39961) 

Guy Eriksen (Reg. No. 41736) 

Martin I. Kinston (Reg. No. 31613) 

James H. Fox (Reg. No. 29379) 

William S. Francos (l^cg. No. 38456) 

Barry H. Freedman (Reg. No. 26166) 

Julio A. Garceran (Reg. No. 37138) 

Mony 11. Ghose (fleg. No. 38159) 

Jimmy Goo (Keg. No. 36528) 

Andiony GdUo (Reg. No. 3653^ 

Stephen M. Gurey (Reg. No. 27336) 

John M. Haiman (Reg. No. 381 73) 

Michael B. J ohannesen (Reg. No. 35557) 

Mark A. IcGrisko (Reg. No. 38944) 

Irena Lager (Reg. N o. 39260) 

Christopher N. Md.vone (Reg, No. 34866) 

Scott W. McLellan (Reg. No. 30776) 

Martin G. Meder (Reg. No. 34674) 

John C. Moran (Reg. No. 30782) 

Michael A. Moira (Reg. No. 28975) 

Gregory J. Murgia (Reg. No. 41209) 

Claude R. Naidsse (Reg. No. 38979) 

Joseph J. Opalach (Reg. No. 36229) 

Neil R. Ormos (Reg. No. 35309) 

Eugen E. Pachcr (Reg. No. 29964) 

Jack R. Penrod (Reg. No. 31 864) 

Daniel J. Piotto^^ki (Rc^. No. 42079) 

Gregory C Ranieri (Reg. No. 29695) 

Scott J.'Rittman (Reg. No. 3901 0) 

Eugene J. Rosenthal (Reg. No. 36658) 

Bruce S. Schneider (Reg. No. 27949) 

Ronald D. Slusky (Reg. No. 26585) 

David L. Smith (Reg. No. 30592) 

Patricia A. Verlangieri (Reg. No. 42201) 

John P. Veschi (Reg. No. 39058) 
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David Volejnicek 
Qiarles L. Warten 
Jeffrey M. Weinick 
EH Weiss 



(Reg. No. 29355) 
(Reg. No. 27407) 
(Reg. No. 56304) 
(Reg. No. 17765) 



I heteby appoint the attomcy($) on AITACHMENT A as associate attonicy(s) in the 
aforementioned application, with full power solely to prosecute said application, to make 
alterations and amendments thereio, to receive the patent, and to transact all business in the 
Patent and Trademark Office connected with the prosecution of said application. No other 
powers are granted to $uch associate attomey(s) and such associate attorncy($) are specifically 
denied any power of substitution or revocation. 



ELIN ^ 

dyj^ \tui^ (J^^oM: D ate z/ztA 



Douglas StrceterDAUDELIN 

Inventor's signature (Lt^^ XUcik ^^x^A' D ate 'Z.jz'i/TJc^ 

Residence: Independence, NJ 
Citizenship: USA 

Post Office Address: 79 Ridge Road, Hackettstown, NJ 07840 



Zoran SIVESKl 

Inventox's signature ^^"'-^ ^ Dat e'^/^'^A^ o o 

Residence: New York City, NY 
Qtizcnship: USA 

Post Office Address: 10 Park Terrace E., Apt # 3A, New York, NY 10034 
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ATTAC HMENT A 



x\ttomey Name(s): Raymond C. Stewayt Reg. No.: 21,066 

JosQ-ph A, Kolasch 2 2,463 

James M. Slattery 28.380 

Donald J. Dale^r 34.313 

Joto A- Ca?tgto9 35.094 

Gary D. Yacura 35.416 



Telephooe calls should be made to Birch Stewart Kolasch & Birch, LLP at: 
Phone No.: (7Q3;^ 205-8000 
Fax No.: (705) 205-8050 

All uiitten communicatiorLs arc to be addreased to: 

BIRCH, STEWART, KOLASCH & BIRCH, LLP, 
P.O. BOX 747 
Falls Church, Virginia 22040-0747 
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